CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Attackers can inject unsafe paths into generated manifests, allowing downstream hosts to access unauthorized files or authentication cards.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-105795?
CVE-2026-105795 is a low-severity path traversal vulnerability in Microsoft.OpenApi.Kiota, published on 6 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe package-relative file reference. Parent-directory traversal, rooted paths, or absolute URIs can therefore reach a consuming host that resolves the reference, allowing the host to cross the intended plugin-package boundary or use an unintended authentication card. Kiota does not itself read a local file or execute code merely while generating the manifest, and impact requires downstream resolution of the unsafe reference. This issue is fixed in version 1.35.0.
Weakness: CWE-22
Which versions are affected by CVE-2026-105795?
4 open source packages ship an affected version, including Microsoft.OpenApi.Kiota and Microsoft.OpenApi.Kiota.Builder.
| Package | Affected | Fixed in |
|---|---|---|
Microsoft.OpenApi.Kiota NuGet | From 1.25.1 | 1.35.0 |
Microsoft.OpenApi.Kiota NuGet | From 1.25.1 | 1.35.0 |
Microsoft.OpenApi.Kiota.Builder NuGet | From 1.25.1 | 1.35.0 |
Microsoft.OpenApi.Kiota.Builder NuGet | From 1.25.1 | 1.35.0 |
How do I fix CVE-2026-105795?
Upgrade Microsoft.OpenApi.Kiota to 1.35.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-105795 being exploited?
There is no known exploitation of CVE-2026-105795 in the wild and no public exploit code.
Sources
Also known as GHSA-6gw6-rv2g-25mg.